Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft
File: caJzmyDCWcXRs4jRRT9vF5nyj2w.mft (raw, json)
Hash identifier: OB9YKaudG5inTL5Tt+RUjhyR/QCuPiV1aQqvRPCPrxA=
Subject key identifier: A5:82:55:BA:EA:18:E6:FE:FA:90:63:F0:CB:A1:97:8C:05:0C:F8:C4
Authority key identifier: 71:A2:73:9B:20:C2:59:C5:D1:B3:88:D1:45:3F:6F:17:99:F2:8F:6C
Certificate issuer: /CN=71a2739b20c259c5d1b388d1453f6f1799f28f6c
Certificate serial: 019D2F627010726481E377667ECEA1B27EB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft
Manifest number: 05E4
Signing time: Fri 27 Mar 2026 13:01:13 +0000
Manifest this update: Fri 27 Mar 2026 13:01:13 +0000
Manifest next update: Sat 28 Mar 2026 13:01:13 +0000
Files and hashes: 1: Yybkl0ZQXrY26MdD4FQ9nCbOh9c.roa (hash: xOQT8aF5alDLKyDZy7KGBBHerw/+VNesMI/Q2sx+T/E=)
2: caJzmyDCWcXRs4jRRT9vF5nyj2w.crl (hash: 3DOoTrJjLItnZ90D8tAp+5EGQYr1zFUQt1DtlapDqXg=)
3: f6Gl5ia878MGtM32MXnrZU8aNMI.roa (hash: DY0u0e2tgwdLOC3jP4WK/B8b0MSVRVEFdP0Swwb6Kq0=)
4: s9H6P_An9Cs8KJ23K6jcUiaST5I.roa (hash: R6YBzLVPih79ie1zLN00BwSvjURpM3Xic3Nu8UvJvIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2f:62:70:10:72:64:81:e3:77:66:7e:ce:a1:b2:7e:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71a2739b20c259c5d1b388d1453f6f1799f28f6c
Validity
Not Before: Mar 27 13:01:13 2026 GMT
Not After : Mar 28 13:01:13 2026 GMT
Subject: CN=a58255baea18e6fefa9063f0cba1978c050cf8c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:44:05:d5:fc:89:14:d2:bd:87:c2:52:75:74:
4d:a1:d2:4a:f8:37:c5:22:0a:91:02:2c:1c:a0:26:
95:22:0e:94:fe:54:50:3b:90:24:c8:0f:0f:ff:2e:
ac:88:23:67:7e:ce:4f:fb:85:91:3e:2e:e8:fe:b9:
30:fb:5f:60:5a:23:00:0b:bc:be:6f:b9:36:09:c5:
e0:21:6c:e6:c1:62:97:d1:0b:2e:5b:2e:2e:3b:67:
be:cb:9d:7d:e3:60:4b:bb:0f:67:c1:29:c5:4e:7a:
ac:56:13:f9:63:5c:ae:0c:3c:d7:c8:34:40:a4:18:
4b:0c:14:57:44:bc:96:9c:b1:f6:1a:c6:a4:7e:75:
80:2e:9c:97:f6:62:b6:f0:a7:42:ca:c4:c7:06:e1:
70:51:4d:35:b8:88:60:cc:04:09:d5:fa:47:cb:86:
ac:d0:4b:02:cc:0e:58:d1:f4:dc:be:82:06:a0:d0:
87:a7:5c:18:0d:b6:fd:7c:14:13:cf:9e:cf:e0:5b:
df:e1:c8:6f:ae:b0:70:3a:1e:34:aa:a1:e6:3f:32:
db:7c:21:75:ef:f8:10:f1:08:45:00:6a:42:9c:7d:
8a:23:2e:16:e0:8e:39:91:e1:a0:90:2d:e0:8b:e4:
9c:14:9a:eb:17:66:f1:65:db:13:59:54:53:b2:5c:
64:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:82:55:BA:EA:18:E6:FE:FA:90:63:F0:CB:A1:97:8C:05:0C:F8:C4
X509v3 Authority Key Identifier:
keyid:71:A2:73:9B:20:C2:59:C5:D1:B3:88:D1:45:3F:6F:17:99:F2:8F:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:80:e7:e1:08:ce:69:91:e6:34:aa:c1:ec:19:f6:04:41:a3:
05:72:ee:a3:71:67:39:9d:06:71:2c:8e:60:91:af:c2:9d:30:
b9:15:2f:2a:b7:b5:79:81:c8:1f:25:f8:23:86:ae:2d:15:9a:
31:2d:de:35:4c:e0:ee:b0:dd:88:70:d7:8e:b6:c0:7f:b2:26:
70:be:b5:78:09:95:65:28:c6:49:3e:d5:15:de:9a:08:86:ca:
7c:5c:27:91:8f:f1:bf:fa:fe:d5:13:42:51:41:6f:6c:56:ea:
5e:1e:c6:2c:c7:96:ce:56:30:16:a7:cd:ea:f3:17:0e:e6:0e:
a2:3e:b2:e2:26:b3:9a:f4:9d:7c:34:1d:d7:60:c2:7b:bb:82:
5e:0e:ae:b9:48:94:21:10:73:ef:d5:30:19:e0:f7:99:ea:4a:
16:cc:0f:27:ed:30:f2:ee:f8:59:e9:24:75:3b:f0:f4:2d:a6:
49:4b:e6:5d:70:b3:24:97:0c:b7:f9:09:bb:fc:e6:c0:3f:dd:
40:99:b4:d8:78:24:b2:34:c5:f5:41:78:f4:b6:70:fe:98:6a:
6a:96:2a:9f:22:98:1d:74:67:61:83:4f:2a:9d:63:55:75:95:
3c:d3:36:cd:12:91:54:45:64:50:1f:fe:d6:c4:c4:4b:e2:0f:
d4:bc:33:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 15:40:13 2026 by rpki-client